[ https://issues.apache.org/jira/browse/VYSPER-203?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12871634#action_12871634 ]
Niklas Gustavsson commented on VYSPER-203: ------------------------------------------ For the already added libs, the licenses have been checked: Jetty: dual licensed ASL 2.0 & EPL strophe.js: MIT flXHR: MIT We definitely need to add these to our NOTICE file, at least for our binary distributions. How about using the maven remote-resources to generate this file (the one in the root of the vysper-X.X-bin.[zip|tar.gz]? It's already used for the NOTICE (and LICENSE) files in all JAR files (as mandated by the Apache parent POM). For our source distributions, as far as I understand NOTICE files, we do not need to include the license or attributions for binary dependencies. > Record new dependencies from BOSH extension > ------------------------------------------- > > Key: VYSPER-203 > URL: https://issues.apache.org/jira/browse/VYSPER-203 > Project: VYSPER > Issue Type: Task > Affects Versions: 0.6 > Reporter: Bernd Fondermann > Priority: Blocker > > BOSH introduces new dependencies. License must be checked and records be made > in our release notes. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.